Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
File:                     B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json)
Hash identifier:          /L5cchjn8EHITmEko+IEylq+/H1PB+0o6Aj8EPKzx9Q=
Subject key identifier:   CC:BD:FF:12:E0:7A:07:9F:42:CA:BC:AC:A9:4F:89:69:EA:2B:51:C4
Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6
Certificate issuer:       /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
Certificate serial:       203CC67958A678E85D3DE6A266EF6BF3A3A363F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
Manifest number:          011D
Signing time:             Sat 18 Apr 2026 13:51:20 +0000
Manifest this update:     Sat 18 Apr 2026 13:46:20 +0000
Manifest next update:     Wed 22 Apr 2026 01:10:20 +0000
Files and hashes:         1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: 2aW8tcE1JS/PF+/yiEh1XLs1fYH7R9tsJTMVej+yxws=)
                          2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl
                          rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 01:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3c:c6:79:58:a6:78:e8:5d:3d:e6:a2:66:ef:6b:f3:a3:a3:63:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6
        Validity
            Not Before: Apr 18 13:46:20 2026 GMT
            Not After : Apr 22 01:10:20 2026 GMT
        Subject: CN=CCBDFF12E07A079F42CABCACA94F8969EA2B51C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:ac:b9:32:25:bb:22:ed:ff:cd:79:c0:5d:
                    89:e8:c1:3c:ef:9e:4b:a3:fc:a2:6e:8f:56:5c:d2:
                    50:75:38:82:03:5d:9e:7b:39:54:9b:b9:11:27:ab:
                    d4:a9:df:5a:7f:d9:1f:40:a5:2f:c7:28:91:52:e8:
                    dc:15:42:39:c8:87:03:cb:84:ba:11:5b:a9:e8:78:
                    b0:53:61:fc:a7:ed:ab:76:70:d9:24:7e:ff:cb:a4:
                    8e:35:52:9c:2f:9e:ec:40:30:1e:36:82:30:50:db:
                    e4:2f:4e:5f:06:43:1e:54:de:13:b5:9d:66:7b:33:
                    36:bb:e9:f2:a0:fd:05:73:dd:57:b9:03:59:33:85:
                    9a:33:2a:db:7e:c8:f3:f9:f5:65:65:3d:ed:12:10:
                    81:4e:c6:db:92:a6:26:f4:36:ca:8e:1d:e4:8f:44:
                    27:e3:cd:e6:16:e9:f7:cb:0f:8b:fe:23:18:47:40:
                    80:39:68:fa:12:a2:1f:97:c5:c7:d4:51:cd:64:2f:
                    e1:ac:b2:5a:f7:5e:05:dd:c5:e4:8b:b6:22:2b:e6:
                    d4:8c:06:22:af:75:0c:e9:23:94:ca:c6:ed:73:84:
                    6c:24:97:19:87:08:a9:ed:cc:0a:55:07:79:20:79:
                    38:9a:3e:89:57:3f:85:96:39:4a:e5:93:27:50:83:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BD:FF:12:E0:7A:07:9F:42:CA:BC:AC:A9:4F:89:69:EA:2B:51:C4
            X509v3 Authority Key Identifier:
                keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:56:0a:99:42:80:95:08:e7:75:c4:fd:a2:d6:d0:8b:43:54:
         e2:4f:2d:36:e1:b1:b7:22:76:1f:40:26:41:89:dd:ec:6d:1c:
         58:d6:9e:86:c3:ce:a6:70:34:f1:8c:08:d0:df:2b:93:ca:02:
         33:ca:fc:db:ff:0b:9f:c6:3e:eb:68:09:00:f1:b5:c7:d6:2d:
         28:be:7e:d2:ac:5e:b7:c6:71:ba:63:9e:8f:6d:05:2e:4c:ad:
         02:eb:c9:9c:c0:1b:b3:90:f2:41:d3:e7:1b:29:c6:17:d5:55:
         4c:d6:3e:a4:ea:91:f3:23:cb:41:99:d7:d5:23:87:81:8a:b9:
         4d:ce:06:8a:86:18:97:c2:7b:d5:56:02:b5:36:f8:af:97:1b:
         bd:7f:83:f6:a7:65:da:32:60:49:78:2c:4e:18:5a:40:b8:e4:
         71:1f:54:08:99:eb:bd:7b:60:84:cc:77:47:ee:62:4a:81:04:
         f6:65:55:8b:48:76:68:28:a7:b9:eb:aa:34:6e:11:42:58:db:
         b1:aa:1e:3a:ea:96:6b:3e:40:c8:b8:39:4f:6f:78:ae:36:05:
         2b:6e:00:b4:96:e0:1d:f5:b8:b7:a1:8b:05:af:26:c0:a3:d7:
         da:11:01:58:c8:cf:e4:f0:91:9c:72:fe:49:c0:51:ed:56:55:
         e9:d1:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:10 2026 by rpki-client